DLPs A200 to A299

Note The terms "Unidirectional Path Switched Ring" and "UPSR" may appear in Cisco literature. These terms do not refer to using Cisco ONS 15xxx products in a unidirectional path switched ring configuration. Rather, these terms, as well as "Path Protected Mesh Network" and "PPMN," refer generally to Cisco's path protection feature, which may be used in any topological network configuration. Cisco does not recommend using its path protection feature in any particular topological network configuration.

DLP-A201 Apply a Lock-on

Purpose

This task prevents traffic from being switched from one card or port to another.

Note To apply a lock-on to a protect card in a 1:1 or 1:N protection group, the protect card must be active. If the protect card is in standby, the Lock On button is disabled. To make the protect card active, you must switch traffic from the working card to the protect card (Step 4). When the protect card is active, you can apply the lock on.

Step 1 Use the following rules to determine if you can apply a lock on:

•For a 1:1 electrical protection group, the working or protect cards can be placed in the Lock On state.

•For a 1:N electrical protection group, the working or protect cards can be placed in the Lock On state.

•For a 1+1 optical protection group, only the working port can be placed in the Lock On state.

Step 2 In node view, click the Maintenance > Protection tabs.

Step 3 In the Protection Groups list, click the protection group where you want to apply a lock on.

Step 4 If you determine that the protect card is in standby mode and you want to apply the lock on to the protect card, make the protect card active:

a. In the Selected Group list, click the protect card.

b. In the Switch Commands area, click Force.

Step 5 In the Selected Group list, click the active card where you want to lock traffic.

Note Provisioning a lockout raises a LOCKOUT-REQ condition in Cisco Transport Controller (CTC). If applied to a span, the FE-LOCKOUTOFPR-SPAN condition is also raised. Clearing the lockout switch request clears these conditions.

Step 4 Use an inspection microscope to inspect each fiber connector for dirt, cracks, or scratches. If the connector is not clean, repeat Steps 1 to 3.

Step 5 Insert the fiber connector into the applicable adapter or attach a dust cap to the fiber connector.

Note If you must replace a dust cap on a connector, first verify that the dust cap is clean. To clean the dust cap, wipe the outside of the cap using a dry, lint-free wipe and the inside of the dust cap using a CLETOP stick swab (14100400).

Step 6 Return to your originating procedure (NTP).

DLP-A206 Clean the Fiber Adapters

Purpose

This task cleans the fiber adapters.

Tools/Equipment

CLETOP stick swab

Prerequisite Procedures

None

Required/As Needed

Required

Onsite/Remote

Onsite

Security Level

None

Step 1 Remove the dust plug from the fiber adapter.

Step 2 Insert a CLETOP stick swab (14100400) into the adapter opening and rotate the swab.

Step 3 Place dust plugs on the fiber adapters when not in use.

Step 4 Return to your originating procedure (NTP).

DLP-A207 Install Fiber-Optic Cables on the LGX Interface

Purpose

This task installs fiber-optic cables on the Lightguide Cross Connect (LGX) interface in the central office.

Step 1 Align the keyed ridge of the cable connector with the receiving SC connector on the LGX faceplate connection point. Each module supports at least one transmit and one receive connector to create an optical carrier port.

Step 2 Gently insert the cable connector into the faceplate connection point until the connector snaps into place.

Caution When provisioning orderwire for ONS 15454s residing in a ring, do not provision a complete orderwire loop. For example, a four-node ring typically has east and west ports provisioned at all four nodes. However, to prevent orderwire loops, provision two orderwire ports (east and west) at all but one of the ring nodes.

Tip Before you begin, make a list of the ONS 15454 slots and ports that require orderwire communication.

Step 1 In node view, double-click the AIC-I card to display it in card view.

Step 2 Click the Provisioning > Local Orderwire tabs or the Provisioning > Express Orderwiretabs,depending on the orderwire path that you want to create. Provisioning steps are the same for both types of orderwire.

Step 3 If needed, adjust the transmit (Tx) and receive (Rx) decibels referred to one milliwatt (dBm) by moving the slider to the right or left for the headset type (four-wire or two-wire) that you will use. In general, you should not need to adjust the dBm.

Step 4 If you want to turn on the audible alert (buzzer) for the orderwire, check the Buzzer On check box.

Step 5 Click Apply.

Step 6 Return to your originating procedure (NTP).

DLP-A212 Create a User Data Channel Circuit

Purpose

This task creates a user data channel (UDC) circuit on the ONS 15454. A UDC circuit allows you to create a dedicated data channel between nodes.

Step 1 In node view on the shelf graphic, double-click the card with the ports you want to put in or out of service. The card view appears.

Step 2 Click the Provisioning > Line tabs for all cards except the G-Series cards. For the G-Series cards, choose the Provisioning > Port tabs.

Step 3 In the Admin State column for the target port, choose one of the following from the drop-down list:

•IS—Puts the port in the In-Service and Normal (IS-NR) service state.

•OOS, DSBLD—Puts the port in the Out-of-Service and Management, Disabled (OOS-MA,DSBLD) service state. In this service state, traffic is not passed on the port until the service state is changed to IS-NR; Out-of-Service and Management, Maintenance (OOS-MA,MT); or Out-of-Service and Autonomous, Automatic In-Service (OOS-AU,AINS).

•OOS, MT—Puts the port in the OOS-MA,MT service state. This service state does not interrupt traffic flow and loopbacks are allowed, but alarm reporting is suppressed. Raised fault conditions, whether or not their alarms are reported, can be retrieved on the CTC Conditions tab or by using the TL1 RTRV-COND command. Use the OOS-MA,MT service state for testing or to suppress alarms temporarily. A port must be in the OOS-MA,MT service state before you can apply a loopback. Change to the IS-NR or OOS-AU,AINS service states when testing is complete.

•IS, AINS—Puts the port in the OOS-AU,AINS service state. In this service state, alarm reporting is suppressed, but traffic is carried and loopbacks are allowed. After the soak period passes, the port changes to IS-NR. Raised fault conditions, whether their alarms are reported or not, can be retrieved on the CTC Conditions tab or by using the TL1 RTRV-COND command.

Note CTC will not allow you to change a port service state from IS-NR to OOS-MA,DSBLD. You must first change a port to the OOS-MA,MT service state before putting it in the OOS-MA,DSBLD service state.

For more information about service states, refer to the "Administrative and Service States" appendix of the Cisco ONS 15454 Reference Manual.

Step 4 If the port is in loopback (OOS-MA,LPBK & MT) and you set the Admin State to IS, a confirmation window displays indicating that the loopback will be released and that the action could be service affecting. To continue, click Yes.

Step 5 If you set the Admin State to IS,AINS, set the soak period time in the AINS Soak field. This is the amount of time that the port will stay in the OOS-AU,AINS service state after a signal is continuously received. When the soak period elapses, the port changes to the IS-NR service state.

Step 6 Click Apply. The new port service state appears in the Service State column.

Step 7 As needed, repeat this task for each port.

Step 8 Return to your originating procedure (NTP).

DLP-A217 BLSR Exercise Ring Test

Purpose

This task tests the bidirectional line switched ring (BLSR) functionality without switching traffic. Ring exercise conditions (including the K-byte pass-through) are reported and cleared within 10 to 15 seconds.

a. Right-click the west port of any BLSR node and choose Set West Protection Operation. Figure 19-2 shows an example. (To move a graphic icon, press Ctrl while you drag and drop it to a new location.)

Note For two fiber BLSRs, the squares on the node icons represent the BLSR working and protect channels. You can right-click either channel. For four-fiber BLSRs, the squares represent ports. Right-click either working or protect ports.

Figure 19-2 Protection Operation on a Three-Node BLSR

b. In the Set West Protection Operation dialog box, choose EXERCISE RING from the drop-down list.

c. Click OK.

d. In the Confirm BLSR Operation dialog box, click Yes.

On the network view graphic, an E appears on the working BLSR channel where you invoked the protection switch. The E will appear for 10 to 15 seconds, then disappear.

Step 5 Exercise the east port:

a. Right-click the east port of any BLSR node and choose Set East Protection Operation.

Note For two fiber BLSRs, the squares on the node icons represent the BLSR working and protect channels. You can right-click either channel. For four-fiber BLSRs, the squares represent ports. Right-click either working or protect ports.

b. In the Set East Protection Operation dialog box, choose EXERCISE RING from the drop-down list.

c. Click OK.

d. In the Confirm BLSR Operation dialog box, click Yes.

On the network view graphic, an E appears on the BLSR channel where you invoked the exercise. The E will appear for 10 to 15 seconds, then disappear.

Step 6 In the Cisco Transport Controller window, click the History tab.

DLP-A218 Provision Path Protection Selectors

The Circuit Attributes page of the Circuit Creation wizard must be open.

Required/As Needed

As needed

Onsite/Remote

Onsite or remote

Security Level

Provisioning or higher

Note Provisioning path signal degrade (SD-P) or path signal fail (SF-P) thresholds in the Circuit Attributes page of the Circuit Creation wizard sets the values only for path protection-protected spans. The circuit source and destination use the node default values of 10E-4 for SD-P and 10E-6 for SF-P for unprotected circuits and for the source and drop of path protection circuits.

Step 1 In the path protection area of the Circuit Attributes page of the Circuit Creation wizard, set the path protection selectors:

•Provision working go and return on primary path—Check this box to route the working path on one fiber pair and the protect path on a separate fiber pair. This feature only applies to bidirectional path protection circuits.

•Revertive—Check this box if you want traffic to revert to the working path when the conditions that diverted it to the protect path are repaired. If you do not choose Revertive, traffic remains on the protect path after the switch.

•Reversion time—If Revertive is checked, click the Reversion time field and choose a reversion time from the drop-down list. The range is 0.5 to 12.0 minutes. The default is 5.0 minutes. This is the amount of time that will elapse before the traffic reverts to the working path. Traffic can revert when conditions causing the switch are cleared.

Step 1 In the Circuit Creation wizard on the Route Review and Edit page, click the source node icon if it is not already selected. Arrows indicate the available spans for routing the tunnel from the source node.

Step 2 Click the arrow of the span you want the VT tunnel to travel. The arrow turns yellow. In the Selected Span area, the From and To fields show the slot and port that will carry the tunnel. The source STS appears.

Step 3 If you want to change the source STS, change it in the Source STS field; otherwise, continue with the next step.

Step 4 Click Add Span. The span is added to the Included Spans list and the span arrow turns blue.

Step 5 Repeat Steps 3 and 4 until the tunnel is provisioned from the source to the destination node through all intermediary nodes.

–Valid choices for the E1000-2 and E1000-2-G cards are 1000 Full and Auto.

Note Both 1000 Full and Auto mode set the E1000-2 port to the 1000 Mbps and Full duplex operating mode; however, flow control is disabled when 1000 Full is selected. Choosing Auto mode enables the E1000-2 card to autonegotiate flow control. Flow control is a mechanism that prevents network congestion by ensuring that transmitting devices do not overwhelm receiving devices with data. The E1000-2 port handshakes with the connected network device to determine if that device supports flow control.

•Enabled—Check this check box to activate the corresponding Ethernet port.

•Priority—Choose a queuing priority for the port. Options range from 0 (Low) to 7 (High). Priority queuing (IEEE 802.1Q) reduces the impact of network congestion by mapping Ethernet traffic to different priority levels. Refer to the priority queuing information in the Cisco ONS 15454 Reference Manual. This parameter does not apply to an E-Series card in port-mapped mode.

•Stp Enabled—Check this check box to enable the Spanning Tree Protocol (STP) on the port. This parameter does not apply to an E-Series card in port-mapped mode. Refer to the spanning tree information in the Cisco ONS 15454 and Cisco ONS 15454 SDH Ethernet Card Software Feature and Configuration Guide.

Step 4 Click Apply.

Step 5 Repeat Steps 1 through 4 for all other cards in the VLAN, or if the E-Series card is in port-mapped mode, repeat Steps 1 through 4 for the other card in the point-to-point circuit. Your Ethernet ports are provisioned and ready to be configured for VLAN membership.

Step 6 Return to your originating procedure (NTP).

DLP-A221 Provision E-Series Ethernet Ports for VLAN Membership

Purpose

This task provisions E-Series ports for VLAN membership. It does not apply to E-Series cards in port-mapped mode.

Step 1 In node view, double-click the E-Series card graphic to open the card.

Step 2 Click the Provisioning > VLAN tabs.

Step 3 To put a port in a VLAN:

a. Click the port and choose either Tagged or Untag.

b. If a port is a member of only one VLAN, choose Untag from the Port column in the VLAN's row. Choose -- for all of the other VLAN rows in that Port column.

Note The VLAN with Untag selected can connect to the port, but other VLANs cannot access that port.

c. Choose Tagged at all VLAN rows that need to be trunked. Choose Untag at VLAN rows that do not need to be trunked, for example, the default VLAN.

Note Each Ethernet port must be attached to at least one untagged VLAN. A trunk port connects multiple VLANs to an external device, such as a switch, which also supports trunking. A trunk port must have tagging (IEEE 802.1Q) enabled for all of the VLANs that connect to that external device.

Step 2 Click the Filtertool at the lower-right side of the bottom toolbar.

Alarm filtering is enabled if the tool is selected and disabled if the tool is raised (not selected).

Alarm filtering will be enabled in the card, node, and network views of the Alarms tab at the node and for all other nodes in the network. If, for example, the Alarm Filter tool is enabled in the Alarms tab of the node view at one node, the Alarmstab in the network view and card view of that node will also show the tool enabled. All other nodes in the network will also have the tool enabled.

If you filter an alarm in card view, the alarm will still be displayed in node view. In this view, the card will display the color of the highest-level alarm. The alarm is also shown for the node in the network view.

Step 3 If you want alarm filtering enabled when you view conditions, repeat Steps 1 and 2 using the Conditions window.

Step 4 If you want alarm filtering enabled when you view alarm history, repeat Steps 1 and 2 using the History window.

Step 5 Return to your originating procedure (NTP).

DLP-A227 Disable Alarm Filtering

Purpose

This task turns off specialized alarm filtering in all network nodes so that all severities are reported in CTC.

Step 3 Click the circuit with the service state that you want to change.

Note You cannot edit the circuit service state if the circuit is routed to nodes with a CTC software release older than Release 3.4. These circuits will automatically be in service (IS).

Step 4 From the Tools menu, choose Circuits > Set Circuit State.

Step 5 In the Set Circuit State dialog box, choose the administrative state from the Target Circuit Admin State drop-down list:

•IS—Puts the circuit cross-connects in the IS-NR service state.

•OOS,DSBLD—Puts the circuit cross-connects in the OOS-MA,DSBLD service state. Traffic is not passed on the circuit.

•IS,AINS—Puts the circuit cross-connects in the OOS-AU,AINS service state. When the connections receive a valid signal, the cross-connect service states automatically change to IS-NR.

•OOS,MT—Puts the circuit cross-connects in the OOS-MA,MT service state. This service state does not interrupt traffic flow and allows loopbacks to be performed on the circuit, but suppresses alarms and conditions. Use the OOS,MT administrative state for circuit testing or to suppress circuit alarms temporarily. Change the administrative state to IS; OOS; or IS,AINS when testing is complete.

•OOS,OOG—(VCAT circuits only) Puts the member in the Out-of-Service and Management, Out-of-Group (OOS-MA,OOG) service state. This administrative state is used to place a member circuit out of the group and to stop sending traffic. OOS-MA,OOG only applies to the cross-connects on an end node where VCAT resides. The cross-connects on intermediate nodes are in the OOS-MA,MT service state.

For additional information about circuit and VCAT service states, refer to the "Circuits and Tunnels" chapter in the Cisco ONS 15454 Reference Manual.

Step 6 If you want to apply the service state to the circuit source and destination ports, check the Apply to Drop Ports check box.

CTC will not change the service state of the circuit source and destination port in certain circumstances. For example, if a port is in loopback (OOS-MA,LPBK & MT), CTC will not change the port to IS-NR. In another example, if the circuit size is smaller than the port, such as a VT1.5 circuit on an STS port, CTC will not change the port service state from IS-NR to OOS-MA,DSBLD. If CTC cannot change the port service state, you must change the port service state manually. For more information, see the "DLP-A214 Change the Service State for a Port" task.

Step 4 If you want to edit a VCAT circuit member name, complete the following steps in the Edit Circuit window. If not, continue with the Step 5.

a. Click the Members tab.

b. Click the VCAT member that you want to edit, then click Edit Member. The Edit Member window appears.

Step 5 In the General tab, click the Name field and edit or rename the circuit.

Note Names can be up to 48 alphanumeric and/or special characters. However, to ensure that a monitor circuit can be created on this circuit, do not make the name longer than 44 characters because monitor circuits will add "_MON" (four characters) to the circuit name.

Step 6 Click Apply.

Step 7 From the File menu, choose Close.

Step 8 If you changed the name of a VCAT circuit member, repeat Step 7 for the Edit Circuit window.

Step 9 In the Circuits window, verify that the circuit was correctly renamed.

Step 10 Return to your originating procedure (NTP).

DLP-A232 Change Active and Standby Span Color

Purpose

This task changes the color of active (working) and standby (protect) circuit spans shown on the detailed circuit map of the Edit Circuits window. By default, working spans are green and protect spans are purple.

a. In the Span Colors area, click the colored square to the right of the word Active.

b. In the Pick a Color dialog box, click the color for the active span, or click the Reset button if you want the active span to display the last applied (saved) color.

c. Click OK to close the Pick a Color dialog box. If you want to change the standby span color, go to Step 5. If not, click OK to save the change and close the Preferences dialog box, or click Apply to save the change and keep the Preferences dialog box open.

Step 5 As needed, change the color of the standby span:

a. In the Span Colors area, click the colored square to the right of the word Standby.

b. In the Pick a Color dialog box, click the color for the standby span, or click the Reset button if you want the standby span to display the last applied (saved) color.

c. Click OK to save the change and close the Preferences dialog box, or click Apply to save the change and keep the Preferences dialog box open.

Step 6 As needed, return the active and standby spans to their default colors:

a. Click Reset to Defaults.

b. Click OK to save the change and close the Preferences dialog box, or click Apply to save the change and keep the Preferences dialog box open.

Step 7 Return to your originating procedure (NTP).

DLP-A233 Edit Path Protection Circuit Path Selectors

Purpose

This task changes the path protection SF and SD thresholds, the reversion and reversion time, and the path payload defect indication (PDI-P) settings for one or more path protection circuits.

Step 3 In the Circuits tab, click the path protection circuit(s) that you want to edit. To change the settings for multiple circuits, press the Shift key (to choose adjoining circuits) or the Ctrl key (to choose nonadjoining circuits) and click each circuit that you want to change.

Tip To move an icon to a new location, for example, to see BLSR channel (port) information more clearly, click an icon on the Edit BLSR network graphic and while pressing Ctrl, drag the icon to a new location.

Step 4 Right-click the BLSR node channel (port) where the Manual ring switch was applied and choose Set West Protection Operation or Set East Protection Operation, as applicable.

•Ring Name—Enter the BLSR ring name. If the node is being added to a BLSR, use the BLSR ring name.

•Node ID—Enter the node ID. If the node is being added to a BLSR, use an ID that is not used by other BLSR nodes.

•Ring Reversion—Enter the ring reversion time of the existing BLSR.

•West Line—Enter the slot on the node that will connect to the existing BLSR via the node's west line (port).

•East Line—Enter the slot on the node that will connect to the existing BLSR via the node's east line (port).

If you are adding the node to a four-fiber BLSR, complete the following for the second set of fibers:

•Span Reversion—Enter the span reversion time of the existing BLSR.

•West Line—Enter the slot on the node that will connect to the existing BLSR via the node's west line.

•East Line—Enter the slot on the node that will connect to the existing BLSR via the node's east line.

Step 4 Click OK.

Note The BLSR is incomplete and alarms are present until the node is connected to other BLSR nodes.

Step 5 Return to your originating procedure (NTP).

DLP-A244 Use the Reinitialization Tool to Clear the Database and Upload Software (Windows)

Purpose

This task reinitializes the ONS 15454 using the CTC reinitialization tool on a Windows computer. Reinitialization uploads a new software package to the TCC2/TCC2P cards, clears the node database, and restores the factory default parameters.

Tools/Equipment

ONS 15454 SONET System Software CD, Version 8.5

JRE 1.4.2 or JRE 5.0 must be installed on the computer to log into the node when the reinitialization is complete. The reinitialization tool can run on JRE 1.3.1_02, JRE 1.4.2, or JRE 5.0.

•GNE IP—If the node you are reinitializing is accessed through another node configured as a gateway network element (GNE), enter the GNE IP address. If you have a direct connection to the node, leave this field blank.

•Node IP—Enter the node name or IP address of the node that you are reinitializing.

•User ID—Enter the user ID needed to access the node.

•Password—Enter the password for the user ID.

•Upload Package—Check this box to send the software package file to the node. If unchecked, the software stored on the node is not modified.

•Force Upload—Check this box to send the software package file to the node even if the node is running the same software version. If unchecked, reinitialization will not send the software package if the node is already running the same version.

•Activate/Revert—Check this box to activate the uploaded software (if the software is a later than the installed version) or revert to the uploaded software (if the software is earlier than the installed version) as soon as the software file is uploaded. If unchecked, the software is not activated or reverted after the upload, allowing you to initiate the functions later from the node view Maintenance > Software tabs.

•Confirm—Check this box if you want a warning message displayed before any operation is performed. If unchecked, reinitialization does not display a warning message.

•Database restore—Check this box if you want to send a new database to the node and to restore node provision values. (This is equivalent to the CTC database restore with the "Complete Database" check box unchecked.)

•Complete database restore—Check this option to send a new database to the node and to restore node provision and system values. (This is equivalent to the CTC database restore with the "Complete Database" check box checked.)

•No database restore—Check this box if you do not want the node database to be modified.

•Search Path—Enter the path to the CISCO15454 folder on the CD drive.

Step 6 Click Go.

Caution Before continuing with the next step, verify that the database to upload is correct. You cannot reverse the upload process after you click Yes.

Step 7 Review the information on the Confirm NE Re-Initialization dialog box, then click Yes to start the reinitialization.

The reinitialization begins. After the software is downloaded and activated, and the database is uploaded to the TCC2/TCC2P cards, "Complete" appears in the status bar and the TCC2/TCC2P cards will reboot. Wait a few minutes for the reboot to complete.

DLP-A245 Use the Reinitialization Tool to Clear the Database and Upload Software (UNIX)

Purpose

This task reinitializes the ONS 15454 using the CTC reinitialization tool on a UNIX computer. Reinitialization uploads a new software package to the TCC2/TCC2P cards, clears the node database, and restores the factory default parameters.

Tools/Equipment

ONS 15454 SONET System Software CD, Version 8.5

JRE 1.4.2 must be installed on the computer to log into the node when the reinitialization is complete. The reinitialization tool can run on JRE 1.3.1_02, JRE 1.4.2, or JRE 5.0.

Step 2 To find the recovery tool file, go to the CISCO15454 directory on the CD (usually /cdrom/cdrom0/CISCO15454).

Step 3 If you are using a file explorer, double-click the RE-INIT.jar file. If you are working with a command line, run java -jar RE-INIT.jar. The NE Re-Initialization window appears (Figure 19-3).

Step 4 Complete the following fields:

•GNE IP—If the node you are reinitializing is accessed through another node configured as a GNE, enter the GNE IP address. If you have a direct connection to the node, leave this field blank.

•Node IP—Enter the node name or IP address of the node that you are reinitializing.

•User ID—Enter the user ID needed to access the node.

•Password—Enter the password for the user ID.

•Upload Package—Check this box to send the software package file to the node. If unchecked, the software stored on the node is not modified.

•Force Upload—Check this box to send the software package file to the node even if the node is running the same software version. If unchecked, reinitialization will not send the software package if the node is already running the same version.

•Activate/Revert—Check this box to activate the uploaded software (if the software is a later than the installed version) or revert to the uploaded software (if the software is earlier than the installed version) as soon as the software file is uploaded. If unchecked, the software is not activated or reverted after the upload, allowing you to initiate the functions later from the node view Maintenance > Software tabs.

•Confirm—Check this box if you want a warning message displayed before any operation is performed. If unchecked, reinitialization does not display a warning message.

•Database restore—Check this box if you want to send a new database to the node and to restore node provision values. (This is equivalent to the CTC database restore with the "Complete Database" check box unchecked.)

•Complete database restore—Check this option to send a new database to the node and to restore node provision and system values. (This is equivalent to the CTC database restore with the "Complete Database" check box checked.)

•No database restore—Check this box if you do not want the node database to be modified.

•Search Path—Enter the path to the CISCO15454 folder on the CD drive.

Step 5 Click Go.

Caution Before continuing with the next step, verify that the database to upload is correct. You cannot reverse the upload process after you click Yes.

Step 6 Review the information on the Confirm NE Re-Initialization dialog box, then click Yes to start the reinitialization.

The reinitialization begins. After the software is downloaded and activated and the database is uploaded to the TCC2/TCC2P cards, "Complete" appears in the status bar and the TCC2/TCC2P cards will reboot. Wait a few minutes for the reboot to complete.

DLP-A247 Change an OC-N Card

Purpose

This task changes an OC-N card while maintaining existing provisioning, including data communications channels (DCCs), circuits, protection, timing, and rings. This task is intended to be used when you are replacing a card with a card of identical type and line rate; when a slot is preprovisioned and you want to change the optical speed of the card; or when you have backed out of an automatic span upgrade.

Caution Physically removing an OC-N card can cause a loss of working traffic or a protection switch. See
Chapter 12 "Upgrade Cards and Spans" for information on upgrading traffic to a higher speed.

Note You can change a multiport card to a card with a smaller number of ports only if the new card has the same line rate as the multiport card. (The MRC-12 card can be changed to either a single-port OC-12 card or a single-port OC-48 card.)

Note You can upgade only one-port OC-12 or one-port OC-48 cards to MRC-12 or MRC-2.5G-4 cards. The port in one-port OC-12 or one-port OC-48 cards map to Port 1 on the MRC-12 or MRC-2.5G-4 card.

Step 1 If the card the active card in a 1+1 protection group, switch traffic away from the card:

a. Log into a node on the network. If you are already logged in, go to Step b.

b. Display the CTC node (login) view.

c. Click the Maintenance > Protection tabs.

d. Double-click the protection group that contains the reporting card.

e. Click the active card of the selected group.

f. Click Switch and Yes in the Confirmation dialog box.

Step 2 In CTC, right-click the card that you want to remove and choose Change Card.

Caution Verify that the IP address assigned to the node does not duplicate an address assigned to another ONS 15454 on the same subnet. If the same addresses are assigned to ONS 15454s on the same subnet, loss of visibility will occur.

Step 1 In node view, click the Provisioning > Network > General tabs.

Step 2 Complete the following information in the fields listed:

•IP Address—Type the IP address assigned to the ONS 15454 node.

Note If TCC2P cards are installed, dual IP addressing via secure mode is available. When secure mode is off (sometimes called repeater mode), the IP address entered in the IP Address field applies to the backplane LAN port and the TCC2P TCP/IP (LAN) port. When secure mode is on, the IP Address field shows the address assigned to the TCC2P TCP/IP (LAN) port and the Superuser can enable or disable display of the backplane IP address. See the "DLP-A433 Enable Node Secure Mode" task as needed. Refer to the "Management Network Connectivity" chapter in the Cisco ONS 15454 Reference Manual for more information about secure mode.

•Net/Subnet Mask Length—Type the subnet mask length (decimal number representing the subnet mask length in bits) or click the arrows to adjust the subnet mask length. The subnet mask length is the same for all ONS 15454s in the same subnet.

Note In secure mode, the front and back TCP/IP (LAN) ports are assigned different MAC addresses, and the backplane information can be hidden or revealed by a Superuser.

•Default Router—If the ONS 15454 is connected to a LAN, enter the IP address of the default router. The default router forwards packets to network devices that the ONS 15454 cannot directly access. This field is ignored if any of the following are true:

–The ONS 15454 is not connected to a LAN.

–The SOCKS proxy server is enabled and the ONS 15454 is provisioned as an end network element (ENE).

–Open Shortest Path First (OSPF) is enabled on both the ONS 15454 and the LAN where the ONS 15454 is connected.

–Display Only—Displays the node IP address on the LCD but does not allow users to change the IP address using the LCD.

–Suppress Display—Suppresses the node IP address display on the LCD.

•Suppress CTC IP Display—Check this check box if you want to prevent the node IP address from being displayed in CTC (IP Address field, information area) to users with Provisioning, Maintenance, or Retrieve security levels. If the IP address is not suppressed, it is shown in the IP Address field.

Note IP address suppression is not applied to users with a Superuser security level. However, in secure mode the backplane IP address visibility can be restricted to only a locally connected Superuser viewing the routing table. In this case, the backplane IP address is not revealed to any user at any other NE on the routing table or in autonomous messages (such as the TL1 REPT^DBCHG command, alarms, and PM reporting).

•Forward DHCP Request To—Check this check box to enable DHCP. Also, enter the DHCP server IP address in the Request To field. Unchecked is the default. If you will enable any of the gateway settings to implement the ONS 15454 SOCKS proxy server features, leave this field blank.

Note If you enable DHCP, computers connected to an ONS 15454 node can obtain temporary IP addresses from an external DHCP server. The ONS 15454 only forwards DHCP requests; it does not act as a DHCP server.

•Gateway Settings—Provisions the ONS 15454 SOCKS proxy server features. (SOCKS is a standard proxy protocol for IP-based applications.) Do not change any of these options until you review the SOCKS proxy server scenario in the "Management Network Connectivity" chapter of the Cisco ONS 15454 Reference Manual. In SOCKS proxy server networks, the ONS 15454 is either an ENE, GNE, or proxy-only server. Provisioning must be consistent for each NE type.

•Enable SOCKS proxy server on port—If checked, the ONS 15454 serves as a proxy for connections between CTC clients and ONS 15454s that are DCC-connected to the proxy ONS 15454. The CTC client establishes connections to DCC-connected nodes through the proxy node. The CTC client does not require IP connectivity to the DCC-connected nodes, only to the proxy ONS 15454. If Enable SOCKS proxy server on port is off, the node does not proxy for any CTC clients. When this box is checked, you can set the node as an ENE or a GNE:

–External Network Element (ENE)—Choose this option when the ONS 15454 is not connected to a LAN but has DCC connections to other ONS nodes. A CTC computer connected to the ENE through the TCC2/TCC2P craft port can manage nodes that have DCC connections to the ENE. However, the CTC computer does not have direct IP connectivity to these nodes or to any LAN/WAN that those nodes might be connected to.

–Gateway Network Element (GNE)—Choose this option when the ONS 15454 is connected to a LAN and has DCC connections to other nodes. A CTC computer connected to the LAN can manage all nodes that have DCC connections to the GNE, but the CTC computer does not have direct IP connectivity to them. The GNE option isolates the LAN from the DCC network so that IP traffic originating from the DCC-connected nodes and any CTC computers connected to them is prevented from reaching the LAN.

–SOCKS Proxy-Only—Choose this option when the ONS 15454 is connected to a LAN and the LAN is separated from the node by a firewall. The SOCKS Proxy Only is the same as the GNE option, except the SOCKS Proxy Only option does not isolate the DCC network from the LAN.

Note If a node is provisioned in secure mode, it is automatically provisioned as a GNE with SOCKS proxy enabled. However, this provisioning can be overridden, and the secure node can be changed to an ENE. In secure mode, SOCKS cannot be disabled. See the "DLP-A433 Enable Node Secure Mode" task for provisioning instructions, including GNE or ENE status.

Step 3 Click Apply.

Step 4 Click Yes in the confirmation dialog box.

Both TCC2/TCC2P cards reboot, one at a time. During this time (approximately 5 minutes), the active and standby TCC2/TCC2P card LEDs go through the cycle shown in Table 19-2. Eventually, a "Lost node connection, switching to network view" message appears.

Table 19-2 LED Behavior During TCC2/TCC2P Reboot

Reboot Activity

Active TCC2/TCC2P LEDs

Standby TCC2/TCC2P LEDs

Standby TCC2/TCC2P card updated with new network information.

Memory test (1 to 2 minutes).

If an AIC-I card is installed, the AIC FAIL and alarm LEDs light up briefly when the AIC is updated.

You will need the OSPF Area ID, Hello and Dead intervals, and authentication key (if OSPF authentication is enabled) provisioned on the router to which the ONS 15454 is connected.

Required/As Needed

As needed

Onsite/Remote

Onsite or remote

Security Level

Provisioning or higher

Step 1 In node view, click the Provisioning > Network > OSPF tabs.

Step 2 On the top left side of the OSPF pane, complete the following:

•DCC/GCC OSPF Area ID Table—In dotted decimal format, enter the number that identifies the ONS 15454s as a unique OSPF area ID. The Area ID can be any number between 000.000.000.000 and 255.255.255.255, but must be unique to the LAN OSPF area.

•SDCC Metric—This value is normally unchanged. It sets a cost for sending packets across the Section DCC, which is used by OSPF routers to calculate the shortest path. This value should always be higher than the LAN metric. The default SDCC metric is 100.

•LDCC Metric—Sets a cost for sending packets across the Line DCC. This value should always be lower than the SDCC metric. The default LDCC metric is 33. It is usually not changed.

Step 3 In the OSPF on LAN area, complete the following:

•OSPF active on LAN—When checked, enables the ONS 15454 OSPF topology to be advertised to OSPF routers on the LAN. Enable this field on ONS 15454s that directly connect to OSPF routers.

•LAN Port Area ID—Enter the OSPF area ID (dotted decimal format) for the router port where the ONS 15454 is connected. (This number is different from the DCC/generic communications channel [GCC] OSPF Area ID.)

Step 4 By default, OSPF is set to No Authentication. If the OSPF router requires authentication, complete the following steps. If not, continue with Step 5.

a. Click the No Authentication button.

b. In the Edit Authentication Key dialog box, complete the following:

•Type—Choose Simple Password.

•Enter Authentication Key—Enter the password.

•Confirm Authentication Key—Enter the same password to confirm it.

c. Click OK.

The authentication button label changes to Simple Password.

Step 5 Provision the OSPF priority and interval settings.

The OSPF priority and interval defaults are ones most commonly used by OSPF routers. Verify that these defaults match the ones used by the OSPF router where the ONS 15454 is connected.

•Router Priority—Selects the designated router for a subnet.

•Hello Interval (sec)—Sets the number of seconds between OSPF hello packet advertisements sent by OSPF routers. Ten seconds is the default.

•Dead Interval—Sets the number of seconds that will pass while an OSPF router's packets are not visible before its neighbors declare the router down. Forty seconds is the default.

•Transit Delay (sec)—Indicates the service speed. One second is the default.

•Retransmit Interval (sec)—Sets the time that will elapse before a packet is resent. Five seconds is the default.

•LAN Metric—Sets a cost for sending packets across the LAN. This value should always be lower than the DCC metric. Ten is the default.

Step 6 In the OSPF Area Range Table area, create an area range table if one is needed:

Note Area range tables consolidate the information that is outside an OSPF area border. One ONS 15454 in the ONS 15454 OSPF area is connected to the OSPF router. An area range table on this node points the router to the other nodes that reside within the ONS 15454 OSPF area.

a. In the OSPF Area Range Table area, click Create.

b. In the Create Area Range dialog box, enter the following:

•Range Address—Enter the area IP address for the ONS 15454s that reside within the OSPF area. For example, if the ONS 15454 OSPF area includes nodes with IP addresses 10.10.20.100, 10.10.30.150, 10.10.40.200, and 10.10.50.250, the range address would be 10.10.0.0.

•Range Area ID—Enter the OSPF area ID for the ONS 15454s. This is either the ID in the DCC OSPF Area ID field or the ID in the Area ID for LAN Port field.

•Mask Length—Enter the subnet mask length. In the Range Address example, this is 16.

•Advertise—Check this box if you want to advertise the OSPF range table.

c. Click OK.

Step 7 All OSPF areas must be connected to area 0. If the ONS 15454 OSPF area is not physically connected to area 0, use the following steps to create a virtual link table that will provide the disconnected area with a logical path to area 0:

You need to create a static route to the router adjacent to the ONS 15454 for the ONS 15454 to communicate its routing information to non-DCC-connected nodes.

Required/As Needed

As needed

Onsite/Remote

Onsite or remote

Security Level

Provisioning or higher

Step 1 In node view, click the Provisioning > Network > RIP tabs.

Step 2 Check the RIP Active check box if you are activating RIP.

Step 3 Choose either RIP Version 1 or RIP Version 2 from the drop-down list, depending on which version is supported in your network.

Step 4 Set the RIP metric. The RIP metric can be set to a number between 1 and 15 and represents the number of hops.

Step 5 By default, RIP is set to No Authentication. If the router that the ONS 15454 is connected to requires authentication, complete the following steps. If not, continue with Step 6.

a. Click the No Authentication button.

b. In the Edit Authentication Key dialog box, complete the following:

•Type—Choose Simple Password.

•Enter Authentication Key—Enter the password.

•Confirm Authentication Key—Enter the same password to confirm it.

c. Click OK.

The authentication button label changes to Simple Password.

Step 6 If you want to complete an address summary, complete the following steps. If not, continue with Step 7. Complete the address summary only if the ONS 15454 is a gateway NE with multiple external ONS 15454 NEs attached with IP addresses in different subnets.

a. In the RIP Address Summary area, click Create.

b. In the Create Address Summary dialog box, complete the following:

•Summary Address—Enter the summary IP address.

•Mask Length—Enter the subnet mask length using the up and down arrows.

•Hops—Enter the number of hops. The smaller the number of hops, the higher the priority.

c. Click OK.

Step 7 Return to your originating procedure (NTP).

DLP-A255 Cross-Connect Card Side Switch Test

Purpose

This task verifies that the XCVT, XC10G, and XC-VXC-10G cards can effectively switch service (active to standby and standby to active).

Tools/Equipment

The test set specified by the acceptance test procedure, connected and configured as specified in the acceptance test procedure.

Caution Always wait 60 seconds between cross-connect card (side) switches to allow the system to stabilize. This is applicable to all the types of side switches (soft reset or manual switch using CTC or TL1). This condition is also applicable to all the cross-connect types (XC-10G / XC-VXC-10G / XC-VXL-2.5G / XC-VXL-10G / XC-VT).

b. Verify that no unexplained alarms appear on the network. If unexplained alarms appear, resolve them before continuing. Refer to the Cisco ONS 15454 Troubleshooting Guide if necessary.

Step 3 Click the Conditions tab. Verify that no unexplained conditions appear on the network. If unexplained conditions appear, resolve them before continuing. Refer to the Cisco ONS 15454 Troubleshooting Guide if necessary.

Step 4 On the network map, double-click the node containing the cross-connect cards you are testing to open it in node view.

Step 5 Click the Maintenance > Cross-Connect tabs.

Step 6 In the Cross-Connect Cards area, make a note of the active and standby slots.

Note A cross-connect side-switch performed using XC-VXC-10G cards and TCC2/TCC2P cards is errorless.

Step 10 Verify that the active slot noted in Step 6 becomes the standby slot, and that the standby slot becomes the active slot. The switch should appear within 1 to 2 seconds.

Step 11 Verify that traffic on the test set connected to the node is still running. Some bit errors are normal, but traffic flow should not be interrupted. If a traffic interruption occurs, do not continue. Refer to your next level of support.

Step 12 Wait 60 seconds, then repeat Steps 7 through 9 to return the active/standby slots to their configuration at the start of the procedure.

Step 13 Verify that the cross-connect card appears as you noted in Step 6.

Step 14 Return to your originating procedure (NTP).

Note During a maintenance side switch or soft reset of an active XC10G card, the 1+1 protection group might display a protection switch. To disallow the protection switch from being displayed, the protection group should be locked at the node where XC switch or soft reset of an active XC switch is in progress.

DLP-A256 View Ethernet Statistics PM Parameters

Purpose

This task enables you to view current statistical PM counts on an Ethernet card and port to detect possible performance problems.

Depending on the selected auto-refresh interval, the displayed PM counts automatically update when each refresh interval completes. If the auto-refresh interval is set to None, the PM counts that appear are not updated unless you click Refresh.

Step 5 Return to your originating procedure (NTP).

DLP-A261 Refresh PM Counts for a Different Port

Purpose

This task changes the window view to display PM counts for another port on a multiport card.

•To filter circuits that originate, terminate, or pass through a specific node, from the View menu, choose Go to Other Node, then choose the node you want to search and click OK.

•To filter circuits that originate, terminate, or pass through a specific card, double-click the card on the shelf graphic in node view to open the card in card view.

Step 2 Click the Circuits tab.

Step 3 Set the attributes for filtering the circuit display:

a. Click the Filter button.

b. In the General tab of the Circuit Filter dialog box, set the following filter attributes, as necessary:

•Name—Enter a complete or partial circuit name to filter circuits based on the circuit name; otherwise leave the field blank.

•Direction—Choose one: Any (direction not used to filter circuits), 1-way (display only one-way circuits), or 2-way (display only two-way circuits).

•OCHNC Dir—(DWDM OCHNCs only) Choose one: East to West (displays only east-to-west circuits); West to East (displays only west-to-east circuits). For more information, refer to the Cisco ONS 15454 DWDM Procedure Guide.

•Status—Choose a circuit status to filter the circuits. For more information about circuit statuses, see Table 21-2.

•State—Choose one: OOS (display only out-of-service circuits), IS (display only in-service circuits; OCHNCs have IS status only), or OOS-PARTIAL (display only circuits with cross-connects in mixed service states).

•Protection—Choose a protection type to filter the circuits. For more information about protection types, see Table 21-1.

•Slot—Enter a slot number to filter circuits based on the source or destination slot; otherwise leave the field blank.

•Port—Enter a port number to filter circuits based on the source or destination port; otherwise leave the field blank.

The check boxes shown depend on the Type field selection. If you chose Any, all sizes are available. If you chose VT, VT1.5 or VT2 are available. If you chose VT-V, only VT1.5 is available. If you chose STS, only STS sizes are available, and if you chose VT Tunnel or VT Aggregation Point, only STS-1 is available. If you chose OCHNC as the circuit type, Multi-rate, Equipment non specific, 2.5 Gbps FEC, 2.5 Gbps No FEC, 10 Gbps FEC, and 10 Gbps No FEC appear (DWDM only; refer to the Cisco ONS 15454 DWDM Procedure Guide). If you chose STS-V, only STS-1, STS3c, and STS-12c are available.

Step 4 To set the filter for ring, node, link, and source and drop type, click the Advanced tab and complete the following substeps. If you do not want to make advanced filter selections, continue with Step 5.

a. If you made selections on the General tab, click Yes in the confirmation box to apply the settings.

b. In the Advanced tab of the Circuit Filter dialog box, set the following filter attributes as necessary:

•Ring—Choose the ring from the drop-down list.

•Node—Click the check boxes by each node in the network to filter circuits based on node.

•Link—Choose the desired link in the network.

•Source/Drop—Choose one of the following to filter circuits based on whether they have one or multiple sources and drops: One Source and One Drop Only or Multiple Sources or Multiple Drops.

Step 6 To turn filtering off, click the Filter icon in the lower right corner of the Circuits window. Click the icon again to turn filtering on, and click the Filter button to change the filter attributes.

This task changes the amount of time a path selector switch is delayed for circuits routed on a path protection dual-ring interconnect (DRI) topology. Setting a switch hold-off time (HOT) prevents unnecessary back and forth switching when a circuit is routed through multiple path protection selectors.

Note For FC_MR-4 cards, the path trace string must be identical for all members of the VCAT circuit. You cannot mix path trace strings across members of a VCAT group. When retrieving the path trace string on the FC_MR-4 card view Maintenance > Path Trace subtab, only the member assigned a path trace string displays the path trace information.

Note If neither port is on a transmit/receive card, you will not be able to complete this procedure. If one port is on a transmit/receive card and the other is on a receive-only card, you can set up the transmit string at the transmit/receive port and the receive string at the receive-only port, but you will not be able to transmit in both directions.

Step 4 Choose the STS circuit you want to trace, then click Edit.

Step 5 If you chose a VCAT circuit, complete the following. If not, continue with Step 6.

Step 6 In the Edit Circuit window, click the Show Detailed Map check box at the bottom of the window. A detailed map of the source and destination ports appears.

Step 7 Provision the circuit source transmit string:

a. On the detailed circuit map, right-click the circuit source port (the square on the left or right of the source node icon) and choose Edit J1 Path Trace (port) from the shortcut menu. Figure 19-4 shows an example.

Figure 19-4 Selecting the Edit Path Trace Option

b. In the New Transmit String field, enter the circuit source transmit string. Enter a string that makes the source port easy to identify, such as the node IP address, node name, circuit name, or another string. If the New Transmit String field is left blank, the J1 transmits a string of null characters.

b. In the New Transmit String field, enter the string that you want the circuit destination to transmit. Enter a string that makes the destination port easy to identify, such as the node IP address, node name, circuit name, or another string. If the New Transmit String field is left blank, the J1 transmits a string of null characters.

•Auto—The first string received from the source port is automatically provisioned as the current expected string. An alarm is raised when a string that differs from the baseline is received.

•Manual—The string entered in the Current Expected String field is the baseline. An alarm is raised when a string that differs from the Current Expected String is received.

b. If you set the Path Trace Mode field to Manual, enter the string that the circuit destination should receive from the circuit source in the New Expected String field. If you set Path Trace Mode to Auto, skip this step.

c. Click the Disable AIS and RDI if TIM-P is detected check box if you want to suppress the alarm indication signal (AIS) and remote defect indication (RDI) when the STS Path Trace Identifier Mismatch Path (TIM-P) alarm appears. Refer to the Cisco ONS 15454 Troubleshooting Guide for descriptions of alarms and conditions.

d. (Check box visibility depends on card selection) Click the Disable AIS on C2 Mis-Match check box if you want to suppress the AIS when a C2 mismatch occurs.

e. Click Apply, then click Close.

Note It is not necessary to set the format (16 or 64 bytes) for the circuit destination expected string; the path trace process automatically determines the format.

•Auto—Uses the first string received from the port at the other path trace end as the baseline string. An alarm is raised when a string that differs from the baseline is received.

•Manual—Uses the Current Expected String field as the baseline string. An alarm is raised when a string that differs from the Current Expected String is received.

c. If you set the Path Trace Mode field to Manual, enter the string that the circuit source should receive from the circuit destination in the New Expected String field. If you set Path Trace Mode to Auto, skip this step.

d. Click the Disable AIS and RDI if TIM-P is detected check box if you want to suppress the AIS and RDI when the TIM-P alarm appears. Refer to the Cisco ONS 15454 Troubleshooting Guide for descriptions of alarms and conditions.

e. (Check box visibility depends on card selection) Click the Disable AIS on C2 Mis-Match check box if you want to suppress the AIS when a C2 mismatch occurs.

f. Click Apply.

Note It is not necessary to set the format (16 or 64 bytes) for the circuit source expected string; the path trace process automatically determines the format.

Step 11 After you set up the path trace, the received string appears in the Received field on the path trace setup window. The following options are available:

•Click Hex Mode to display path trace in hexadecimal format. The button name changes to ASCII Mode. Click it to return the path trace to ASCII format.

•Click the Reset button to reread values from the port.

•Click Default to return to the path trace default settings (Path Trace Mode is set to Off and the New Transmit and New Expected Strings are null).

Caution Clicking Default will generate alarms if the port on the other end is provisioned with a different string.

The expect and receive strings are updated every few seconds if the Path Trace Mode field is set to Auto or Manual.

Step 12 Click Close.

The detailed circuit map indicates path trace with an M (manual path trace) or an A (automatic path trace) at the circuit source and destination ports.

Step 13 Return to your originating procedure (NTP).

DLP-A265 Change the Login Legal Disclaimer

Purpose

This task modifies the legal disclaimer statement shown in the CTC login dialog box so that it will display customer-specific information when users log into the network.

Step 2 The existing statement is a default, non-customer-specific disclaimer. If you want to edit this statement with specifics for your company, you can change the text. Use the following HTML commands to format the text, as needed:

•<b> Begins boldface font

•</b> Ends boldface font

•<center> Aligns type in the center of the window

•</center> Ends the center alignment

•<font=n, where n = point size> Changes the font to the new size

•</font> Ends the font size command

•<p> Creates a line break

•<sub> Begins subscript

•</sub> Ends subscript

•<sup> Begins superscript

•</sup> Ends superscript

•<u> Starts underline

•</u> Ends underline

Step 3 If you want to preview your changed statement and formatting, click the Preview subtab.

Caution Changing the node IP address, subnet mask, or IIOP listener port causes the TCC2/TCC2P cards to reboot. If Ethernet circuits using Spanning Tree Protocol (STP) originate or terminate on E-Series Ethernet cards installed in the node, circuit traffic will be lost for several minutes while the spanning trees reconverge. Other circuits are not affected by TCC2/TCC2P reboots.

Note If the node contains TCC2P cards and is in default (repeater) mode, the node IP address refers to the TCC2P front-access TCP/IP (LAN) port as well as the backplane LAN port. If the node is in secure mode, this task will only change the front-access port IP address. If the node is in secure mode and has been locked, the IP address cannot be changed unless the lock is removed by Cisco Technical Support.

Step 1 In node view, click the Provisioning > Network > General tabs.

Step 2 Change any of the following:

•IP Address

•Suppress CTC IP Display

•LCD IP Setting

•Default Router

•Forward DHCP Request To

•Net/Subnet Mask Length

•TCC CORBA (IIOP) Listener Port

•Gateway Settings

See the "DLP-A249 Provision IP Settings" task for detailed field descriptions. For more information about secure mode, refer to the "Management Network Connectivity" chapter of the Cisco ONS 15454 Reference Manual

Step 3 Click Apply.

If you changed a network field that will cause the node to reboot, such as the IP address, subnet mask, or TCC Common Object Request Broker Architecture (CORBA) Listener Port, the Change Network Configuration confirmation dialog box appears. If you changed a gateway setting, a confirmation appropriate to the gateway field appears.

Step 4 If a confirmation dialog box appears, click Yes.

If you changed an IP address, subnet mask length, or TCC CORBA (IIOP) Listener Port, both ONS 15454 TCC2/TCC2P cards reboot, one at a time. A TCC2/TCC2P card reboot causes a temporary loss of connectivity to the node, but traffic is unaffected. See Table 19-2 for TCC2/TCC2P reboot behavior.

Step 5 Confirm that the changes appear on the Provisioning > Network > General tab. If the changes do not appear, repeat the task. Refer to the Cisco ONS 15454 Troubleshooting Guide as necessary.

Step 6 Return to your originating procedure (NTP).

DLP-A268 Apply a Custom Network View Background Map

Purpose

This task changes the background image or map of the CTC network view.

Note You can replace the network view background image with any JPEG or GIF image that is accessible on a local or network drive. If you apply a custom background image, the change is stored in your CTC user profile on the computer. The change does not affect other CTC users.

Note If any user who has rights to perform an operation (for example, creating a circuit) selects the "Do not show this dialog again" check box in a dialog box, the dialog box is not displayed for any other users who perform that operation on the network from the same computer unless the command is overridden using the following task. (The preference is stored on the computer, not in the node database.)

Step 1 From the Edit menu, choose Preferences.

Step 2 In the Preferences dialog box, click the General tab.

The Preferences Management area field lists all dialog boxes where "Do not show this dialog again" is enabled.

Step 3 Choose one of the following options, or uncheck the individual dialog boxes that you want to appear:

Step 2 If you want to modify the idle user timeout period, click the hour (H) and minute (M) arrows in the Idle User Timeout area for the security level you want to provision: RETRIEVE, MAINTENANCE, PROVISIONING, or SUPERUSER. The idle period time range is 0 and 16 hours, and 0 and 59 minutes. The user is logged out after the idle user timeout period is reached.

Step 3 In the User Lockout area, you can modify the following:

•Failed Logins Allowed Before Lockout—The number of failed login attempts a user can make before the user is locked out from the node. You can choose a value between 0 and 10.

•Manual Unlock by Superuser—If checked, allows a user with Superuser privileges to manually unlock a user who has been locked out from a node.

•Lockout Duration—Sets the amount of time the user will be locked out after a failed login. You can choose a value between 0 and 10 minutes, and 0 and 55 seconds (in five-second intervals).

Step 4 In the Password Change area, you can modify the following:

•Prevent Reusing Last [ ] Passwords—Choose a value between 1 and 10 to set the number of different passwords the user must create before they can reuse a password.

•New Password must Differ from the Old Password by [ ] Characters—Choose the number of characters that must differ between the old and new password. The default number is 1.

•Cannot Change New Password for [ ] days—If checked, prevents users from changing their password for the specified period. The range is 20 to 95 days.

•Require Password Change on First Login to New Account—If checked, requires users to change their password the first time they log into their account.

Step 5 To require users to change their password at periodic intervals, check the Enforce Password Aging check box in the Password Aging area. If checked, provision the following parameters:

•Aging Period—Sets the amount of time that must pass before the user must change their password for each security level: RETRIEVE, MAINTENANCE, PROVISIONING, and SUPERUSER. The range is 20 to 95 days.

•Warning—Sets the number of days the user will be warned to change his or her password for each security level. The range is 2 to 20 days.

Step 6 In the Other area, you can provision the following:

•Single Session Per User—If checked, limits users to one login session at one time.

•Prevent Superuser Disable—If checked, the super user is NOT disabled after the period of time specified in the Inactive Duration box expires.

•Disable Inactive User—If checked, disables users who do not log into the node for the period of time specified in the Inactive Duration box. The Inactive Duration range is 0 to 99 days.

Note If you advance the node date to a date beyond the threshold in the Inactive Duration box, the user account is disabled. User accounts are not reenabled if you revise the node date backwards, and the account has already been disabled.

Step 3 Click a node on the table that you want to modify, then click Change.

Step 4 If you want to modify the idle user timeout period, click the hour (H) and minute (M) arrows in the Idle User Timeout area for the security level you want to provision: RETRIEVE, MAINTENANCE, PROVISIONING, or SUPERUSER. The idle period time range is 0 and 16 hours, and 0 and 59 minutes. The user is logged out after the idle user timeout period is reached.

Step 5 In the User Lockout area, you can modify the following:

•Failed Logins Allowed Before Lockout—The number of failed login attempts a user can make before the user is locked out from the node. You can choose a value between 0 and 10.

•Manual Unlock by Superuser—Allows a user with Superuser privileges to manually unlock a user who has been locked out from a node.

•Lockout Duration—Sets the amount of time the user will be locked out after a failed login. You can choose a value between 0 and 10 minutes, and 0 and 55 seconds (in five-second intervals).

Step 6 In the Password Change area, you can modify the following:

•Prevent Reusing Last [ ] Passwords—Choose a value between 1 and 10 to set the number of different passwords the user must create before they can reuse a password.

•New Password must Differ from the Old Password by [ ] Characters—Choose the number of characters that must differ between the old and new password. The default number is 1.

•Cannot Change New Password for [ ] days—If checked, prevents users from changing their password for the specified period. The range is 20 to 95 days.

•Require Password Change on First Login to New Account—If checked, requires users to change their password the first time they log into their account.

Step 7 To require users to change their password at periodic intervals, check the Enforce Password Aging check box in the Password Aging area. If checked, provision the following parameters:

•Aging Period—Sets the amount of time that must pass before the user must change his or her password for each security level: RETRIEVE, MAINTENANCE, PROVISIONING, and SUPERUSER. The range is 20 to 95 days.

•Warning—Sets the number of days the user will be warned to change their password for each security level. The range is 2 to 20 days.

Step 8 In the Other area, you can provision the following:

•Single Session Per User—If checked, limits users to one login session at one time.

•Prevent Superuser Disable—If checked, the superuser is NOT disabled after the period of time specified in the Inactive Duration box expires.

•Disable Inactive User—If checked, disables users who do not log into the node for the period of time specified in the Inactive Duration box. The Inactive Duration range is 0 to 99 days.

Note If you advance the node date to a date beyond the threshold in the Inactive Duration box, the user account is disabled. User accounts are not reenabled if you revise the node date backwards, and the account has already been disabled.

Step 9 In the Select Applicable Nodes area, uncheck any nodes where you do not want to apply the changes.

Step 10 Click OK.

Step 11 In the Security Policy Change Results dialog box, confirm that the changes are correct, then click OK.

For a description of SNMP traps, refer to the "SNMP" chapter in the Cisco ONS 15454 Reference Manual.

Step 3 Highlight the Destination row field entry under the Community column and change the entry to another valid community name.

Note The community name is a form of authentication and access control. The community name assigned to the ONS 15454 is case-sensitive and must match the community name of the network management system.

Note The default UDP port for SNMP is 162.

Step 4 Set the Trap Version field for either SNMPv1 or SNMPv2.

Refer to your NMS documentation to determine whether to use SNMP v1 or v2.

Step 5 If you want the SNMP agent to accept SNMP SET requests on certain MIBs, click the Allow SNMP Sets check box. If this box is not checked, SET requests are rejected.

Step 6 If you want to set up the SNMP proxy feature to allow network management, message reporting, and performance statistic retrieval across ONS firewalls, click the Allow SNMP Proxy check box located on the SNMP tab.

Step 7 If you want to enable using generic SNMP MIBs, click the Use Generic MIBs checkbox.

Step 8 Click Apply.

Step 9 SNMP settings are now modified. To view SNMP information for each node, highlight the node IP address in the Trap Destinations area of the Trap Destinations screen.

Step 10 Return to your originating procedure (NTP).

DLP-A293 Perform a Manual Span Upgrade on a Two-Fiber BLSR

Purpose

This task upgrades a two-fiber BLSR span to a higher OC-N rate. To downgrade a span, repeat this task but choose a lower-rate card in Step 5.

Warning Do not reach into a vacant slot or chassis while you install or remove a module or a fan. Exposed circuitry could constitute an energy hazard. Statement 206

Caution Do not perform any other maintenance operations or add any circuits during a span upgrade.

Note All spans connecting the nodes in a BLSR must be upgraded before the bandwidth is available.

Note BLSR protection channel access (PCA) circuits, if present, will remain in their existing STSs. Therefore, they will be located on the working path of the upgraded span and will have full BLSR protection. To route PCA circuits on protection channels in the upgraded span, delete and recreate the circuits after the span upgrade. For example, if you upgrade an OC-48 span to an OC-192, PCA circuits on the protection STSs (STSs 25 to 48) in the OC-48 BLSR will remain in their existing STSs (STSs 25 to 48), which are working, protected STSs in the OC-192 BLSR. Deleting and recreating the OC-48 PCA circuits moves the circuits to STSs 96 to 192 in the OC-192 BLSR. To delete circuits, see the "NTP-A278 Modify and Delete Overhead Circuits and Server Trails" procedure. To create circuits, see Chapter 6 "Create Circuits and VT Tunnels."

Step 8 Verify that the transmit and receive signals fall within the acceptable range. See Table 2-5 for OC-N card transmit and receive levels. If the receive level falls outside the acceptable range for that card, attenuate accordingly.

Step 10 When cards in both endpoint nodes have been successfully upgraded and all the facility alarms (loss of signal [LOS], SD, and SF) are cleared, remove the forced switch from both endpoints on the upgraded span. See the "DLP-A194 Clear a BLSR Force Ring Switch" task.

Step 12 Repeat this task for each span in the BLSR. When you are done with each span, the upgrade is complete.

Step 13 Return to your originating procedure (NTP).

DLP-A294 Perform a Manual Span Upgrade on a Four-Fiber BLSR

Purpose

This task upgrades a four-fiber BLSR span to a higher OC-N rate. Repeat the task to upgrade each span to the higher OC-N rate. To downgrade a span, repeat this task but choose a lower-rate card in Step 5.

Warning Do not reach into a vacant slot or chassis while you install or remove a module or a fan. Exposed circuitry could constitute an energy hazard. Statement 206

Caution Do not perform any other maintenance operations or add any circuits during a span upgrade.

Note All spans connecting the nodes in a BLSR must be upgraded before the bandwidth is available.

Note BLSR PCA circuits, if present, will remain in their existing STSs. Therefore, they will be located on the working path of the upgraded span and will have full BLSR protection. To route PCA circuits on protection channels in the upgraded span, delete and recreate the circuits after the span upgrade. For example, if you upgrade an OC-48 span to an OC-192, PCA circuits on the protection STSs (STSs 25 to 48) in the OC-48 BLSR will remain in their existing STSs (STSs 25 to 48), which are working, protected STSs in the OC-192 BLSR. Deleting and recreating the OC-48 PCA circuits moves the circuits to STSs 96 to 192 in the OC-192 BLSR. To delete circuits, see the "NTP-A278 Modify and Delete Overhead Circuits and Server Trails" procedure. To create circuits, see Chapter 6 "Create Circuits and VT Tunnels."

Step 10 When cards in both endpoint nodes have been successfully upgraded and all the facility alarms (LOS, SD, and SF) are cleared, remove the forced switch from both endpoints (nodes) on the upgraded span. See "DLP-A194 Clear a BLSR Force Ring Switch" task.

This task upgrades path protection spans to a higher OC-N speed. Repeat the task for each span to upgrade the entire ring to the higher OC-N rate. To downgrade a span, repeat this task but choose a lower-rate card in Step 5.

Warning Do not reach into a vacant slot or chassis while you install or remove a module or a fan. Exposed circuitry could constitute an energy hazard. Statement 206

Caution Upgrading unprotected spans will cause all traffic running on those spans to be lost.

Caution Do not perform any other maintenance operations or add any circuits during a span upgrade.

Caution Removing the fiber will cause all traffic on the unprotected span to be lost.

Step 1 Remove the fiber from both endpoint nodes in the span.

Step 2 Remove the OC-N cards from both span endpoints.

Step 3 For both ends of the span, in node view, right-click each OC-N slot and choose Change Card.

Step 4 In the Change Card dialog box, choose the new OC-N type.

Step 5 Click OK.

Step 6 When you have finished Steps 2 through 5 for both nodes, install the new OC-N cards in both endpoints and attach the fiber to the cards. Wait for the IMPROPRMVL alarm to clear and the cards to become active.

Step 1 From the View menu, choose Go to Network View. Verify that all affected spans on the network map are green.

Step 2 Verify that the affected spans do not have active switches on the network map. Span ring switches are represented by the letters "L" for lockout ring, "F" for Force ring, "M" for Manual ring, and "E" for Exercise ring.

Step 3 A second verification method can be performed from the Conditions tab. Click Retrieve Conditions and verify that no switches are active. Make sure the Filter button is not selected.

Tip To move an icon to a new location, for example, to see BLSR channel (port) information more clearly, you can drag and drop icons on the Edit BLSR network graphic.

Step 3 To lock out a west span:

a. Right-click any BLSR node west channel (port) and choose Set West Protection Operation. Figure 19-5 shows an example.

Note For two-fiber BLSRs, the squares on the node icons represent the BLSR working and protect channels. You can right-click either channel. For four-fiber BLSRs, the squares represent ports. You can right-click either working port.

Figure 19-5 Protection Operation on a Three-Node BLSR

b. In the Set West Protection Operation dialog box, choose LOCKOUT PROTECT SPAN from the drop-down list. Click OK.

c. In the Confirm BLSR Operation dialog box, click Yes. An "L" appears on the selected channel (port) where you created the lock out.

Lockouts generate LKOUTPR-S and FE-LOCKOUTOFPR-SPAN conditions.

Step 4 To lock out an east span:

a. Right-click the node's east channel (port) and choose Set East Protection Operation.

b. In the Set East Protection Operation dialog box, choose LOCKOUT PROTECT SPAN from the drop-down list. Click OK.

c. In the Confirm BLSR Operation dialog box, click Yes. An "L" indicating the lockout appears on the selected channel (port) where you invoked the protection switch.